The tag-and-push step mapped the UBI proxy image to the same pr-N, main
and sha-* tags as the distroless image, so whichever was pushed last
replaced the other. Keep a -ubi suffix, as the client variants already do.
License collection now takes a list of architectures and unions the Go
modules across them, matching the client script.